61.jpg [md5:ed4916]

显示全部楼层 · 发表于 2008-5-27 07:34:24

收获的第二个渣滓可以杀的，给kb吧
不过显然这个是一个人免杀的，技术不过关。。

File:	61.jpg
Status:	INFECTED/MALWARE
MD5:	ed491627bfc64abf438a7291c910b843
Packers detected:	UPX

Scanner results
Scan taken on 26 May 2008 23:31:31 (GMT)
A-Squared	Found nothing
AntiVir	Found TR/Spy.Banker.Gen
ArcaVir	Found nothing
Avast	Found nothing
AVG Antivirus	Found PSW.Banker4.AFHW
BitDefender	Found Generic.Banker.Delf.D9766216
ClamAV	Found nothing
CPsecure	Found nothing
Dr.Web	Found DLOADER.Trojan (probable variant)
F-Prot Antivirus	Found nothing
F-Secure Anti-Virus	Found nothing
Fortinet	Found Bnkmr.I!tr
Ikarus	Found Generic.Banker.Delf
Kaspersky Anti-Virus	Found nothing
NOD32	Found probably a variant of Win32/Genetik (probable variant)
Norman Virus Control	Found nothing
Panda Antivirus	Found nothing
Sophos Antivirus	Found Troj/Bnkmr-Fam
VirusBuster	Found nothing
VBA32	Found Trojan-Spy.xBank.1 (paranoid heuristics) (probable variant)

显示全部楼层 · 发表于 2008-5-27 07:46:44

金山毒霸 0

显示全部楼层 · 发表于 2008-5-27 17:25:51

显示全部楼层 · 发表于 2008-5-27 17:33:52

诺顿这几天启发式不知道怎么发起威来了。

检测到的安全风险总数: 1
已解决的项目总数: 0
需要注意的项目总数: 1
已解决的风险:

未解决的风险:
Bloodhound.Bancos.1
病毒 ID: 4850
类型: 已压缩
风险: 高 (高隐蔽性，高清除可能，高性能，高隐私)
类别: 启发式病毒
状态: 删除失败
-----------
1 文件
[61.jpg] 位于[e:\新建文件夹bingdu\61.rar] - 已感染

显示全部楼层 · 发表于 2008-5-27 19:52:43

MISS

显示全部楼层 · 发表于 2008-5-27 19:53:39

[Found downloader] <W32/Downloader.C.gen!Eldorado (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\61.rar->61.jpg->(UPX)

---------------------------------------------------------------------
Scan ended: 2008-5-27, 19:52:32
Duration: 0:00:00

Scan result:

Scanned files:    6
Infected objects:    1
Disinfected objects:    0
Quarantined files:    0
---------------------------------------------------------------------

显示全部楼层 · 发表于 2008-5-27 20:04:55

RS20.46.12未杀！

[病毒样本] 61.jpg [md5:ed4916]

本帖子中包含更多资源

本帖子中包含更多资源

ArcaVir2008

F-Prot 4.4.4

3/0